Highlights
LDAP users are created as enabled by default when using Microsoft Active Directory
If you are using Microsoft AD and creating users through the administrative interfaces, the user will created as enabled by default.
In previous versions, it was only possible to update the user status after setting a (non-temporary) password to the user. This behavior was not consistent with other built-in user storages as well as not consistent with others LDAP vendors supported by the LDAP provider.
Upgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Bugs
- #31415 Selection list does not close after outside click
admin/ui
- #33607 Fix v2 login layout
login/ui
- #33618 No message for `policyGroupsHelp`
admin/ui
- #33640 Customizable footer (Keycloak 26) not displaying in keycloak.v2 login theme
login/ui
- #34301 Remove inaccurate statement about master realm imports
docs
- #34450 [26.0.2] Migration from 25.0.1 Identity Provider Errors
identity-brokering
- #34467 Do not rely on the `pwdLastSet` attribute when updating AD entries
ldap